Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2015-74

UMS (USB) mounting after reboot even without unlocking

Announced
August 6, 2015
Reporter
Clement Lefevre
Impact
High
Products
Firefox OS
Fixed in
  • Firefox OS 2.2

Description

Clement Lefevre reported a bug in USB Mass Storage handling of Firefox OS that would allow unauthorized access to device data through the USB interface. The logic error would under certain circumstances expose USB media volumes to USB hosts while the device is locked with a pass code, for example after a reboot or after certain screen saver state changes.

References